Static task
static1
Behavioral task
behavioral1
Sample
d12f2ae01dcb1dcbe9d1b5d770e98598e224700ea44cff16501aa9276ea80c24.exe
Resource
win7-20240903-en
General
-
Target
d12f2ae01dcb1dcbe9d1b5d770e98598e224700ea44cff16501aa9276ea80c24
-
Size
1.7MB
-
MD5
0419ec2c97b9b3be4f843b685dc437dc
-
SHA1
513b6b17b295588536405eeb97ec7c1109957a75
-
SHA256
d12f2ae01dcb1dcbe9d1b5d770e98598e224700ea44cff16501aa9276ea80c24
-
SHA512
9c4d102439891f0a4cc1e900fe05af2abd38bf0422bfe9afd0102971029411982407a432db5cf511ed7af836fdcbe2973e8e01a3a2b95c2d8162730a02d98473
-
SSDEEP
49152:CP4Otg5uy4GstHiROeye12ezRyBplbDDT:y8z4GstHiRbye3u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d12f2ae01dcb1dcbe9d1b5d770e98598e224700ea44cff16501aa9276ea80c24
Files
-
d12f2ae01dcb1dcbe9d1b5d770e98598e224700ea44cff16501aa9276ea80c24.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qafaqnjm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rmyldehk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE